2026-10-31 归档

今日共收录 3279 条安全情报，包含 2996 个 CVE，94 篇安全通告，以及 100 篇研究论文。

← 返回归档列表

漏洞预警2026-10-21 发布HIGH

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache bRPC (version < 1.18.0) on all platforms allows remote at...

CVE-2026-86146

Inconsistent interpretation of HTTP requests (HTTP request/response smuggling) in the bundled HTTP/1.1 parser of Apache

来源摘录 · NVD

#cve #cwe-444

漏洞预警2026-10-21 发布HIGH

Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin services through the public port. Root Cause: ServerOptions...

CVE-2026-84748

Improper authorization in Apache bRPC (versions < 1.18.0) on all platforms allows remote attackers to access builtin ser

来源摘录 · NVD

#cve #cwe-285

漏洞预警2026-10-21 发布HIGH

A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process (denial of service) when RDMA is enabled at build time an...

CVE-2026-82942

A data race in the RDMA transport of Apache bRPC (versions < 1.18.0) allows a remote client to crash the server process

来源摘录 · NVD

#cve #cwe-362

漏洞预警2026-10-21 发布HIGH

A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the process, resulting in denial of service. Root Cause: When a...

CVE-2026-82425

A reachable assertion in Apache bRPC (version < 1.18.0) on all platforms allows a malicious remote peer to crash the pro

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-21 发布HIGH

A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the server peer it talks to. When the server returns a T_EXCE...

CVE-2026-82231

A Thrift client in Apache bRPC (version < 1.18.0, built with WITH_THRIFT which is off by default) can be crashed by the

来源摘录 · NVD

#cve #cwe-248

漏洞预警2026-10-21 发布HIGH

Enforceable assertion in the streaming feature of Apache bRPC (version < 1.18.0) on all platforms allows a remote attacker to crash the server process by sending a malformed str...

CVE-2026-82210

Enforceable assertion in the streaming feature of Apache bRPC (version 0) and unconditionally asserts CHECK(buf.IsEmpty

来源摘录 · NVD

#cve #cwe-617

漏洞预警2026-10-21 发布HIGH

Uncontrolled resource consumption in the streaming RPC component of Apache bRPC (version < 1.18.0) allows a remote attacker to exhaust server memory and cause denial of service ...

CVE-2026-81755

Uncontrolled resource consumption in the streaming RPC component of Apache bRPC (version < 1.18.0) allows a remote attac

来源摘录 · NVD

#cve #cwe-400

漏洞预警2026-10-21 发布HIGH

Unbounded memory accumulation in the stream message reassembly path of Apache bRPC (version < 1.18.0) on all platforms allows remote attackers to exhaust the memory of a server ...

CVE-2026-80463

Unbounded memory accumulation in the stream message reassembly path of Apache bRPC (version < 1.18.0) on all platforms a

来源摘录 · NVD

#cve #cwe-770

漏洞预警2026-10-21 发布HIGH

Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms where plain char is unsigned, such as ARM64, allow remote...

CVE-2026-61916

Out-of-bounds reads in URL parsing and case-insensitive header lookup in Apache bRPC before version 1.18.0 on platforms

来源摘录 · NVD

#cve #cwe-125

漏洞预警2026-10-23 发布INFO

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use the FileChooser.SaveFiles method to gain arbitrary file acc...

CVE-2026-55888

XDG Desktop Portal is a desktop integration portal. Prior to version 1.22.1, malicious sandboxed applications can use th

来源摘录 · NVD

#cve #cwe-22

漏洞预警2026-10-30 发布HIGH

CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/GetGoodsPageList endpoint via the order parameter appended to an ORD...

CVE-2026-119656

CoreShop by CoreUnion through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Agent/GetGoodsPag

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-30 发布HIGH

CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList endpoint via the unvalidated order parameter appended to ORDER BY...

CVE-2026-119655

CoreShop through 1.5.5 contains an unauthenticated sql injection vulnerability in the api/Good/GetGoodsPageList endpoint

来源摘录 · NVD

#cve #cwe-89

漏洞预警2026-10-30 发布MEDIUM

RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept that allows authenticated users to read users of other dep...

CVE-2026-119647

RuoYi-Vue-Plus through 6.0.0 contains an authorization bypass vulnerability in SysUserServiceImpl.selectUserListByDept t

来源摘录 · NVD

#cve #cwe-639

漏洞预警2026-10-28 发布INFO

Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling escapeParameter, called escapeParameterHtml in the Legacy AP...

CVE-2026-118256

Vue I18n is the internationalization plugin for Vue.js. From 9.0.0-beta.5 until 11.4.14 and 12.0.0-alpha.5, enabling esc

来源摘录 · NVD

#cve #cwe-116 #cwe-79

漏洞预警2026-10-27 发布MEDIUM

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader validates the initial icon host and DNS results but passes...

CVE-2026-116678

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to version 1.37.0, the Vaultwarden icon downloader v

来源摘录 · NVD

#cve #cwe-918

漏洞预警2026-10-26 发布INFO

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL templates can place regex-capture substitutions where crafte...

CVE-2026-116578

Tornado is a Python web framework and asynchronous networking library. Prior to 6.6, tornado.web.RedirectHandler URL tem

来源摘录 · NVD

#cve #cwe-601

漏洞预警2026-10-26 发布HIGH

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications built with the legacy-zip feature can reserve output capac...

CVE-2026-115907

zip is a zip library for Rust that supports reading and writing simple ZIP files. From 5.1.0 until 9.0.0, applications b

来源摘录 · NVD

#cve #cwe-400 #cwe-789

漏洞预警2026-10-23 发布HIGH

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes receiv...

CVE-2026-115776

Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.word

来源摘录 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-10-21 发布HIGH

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal, binary, and decimal digit sequences from lib/parser.js ...

CVE-2026-114144

toml-node is a TOML parser for Node.js and the browser. Prior to 5.0.1, toml.parse() passes unbounded hexadecimal, octal

来源摘录 · NVD

#cve #cwe-400 #cwe-770

漏洞预警2026-10-21 发布INFO

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4.0 until 7.17.2, ExtractOutputPreprocessor in nbconvert/p...

CVE-2026-114140

The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates. From 5.4

来源摘录 · NVD

#cve #cwe-22